fix(canopy): enable reqwest socks feature so the Tailscale SOCKS5 proxy works

Without the socks feature, reqwest rejects socks5:// proxy URLs with

  unsupported scheme socks5

which meant the Tailscale sidecar SOCKS5 proxy (the primary production
network path to canopy per the integration design) never actually
handled canopy traffic — everything went out through the pod's default
network and hit canopy's public DNS directly, failing at TLS/routing.

Author: passcod

Cargo.toml

@@ -21,7 +21,7 @@ kube_quantity = "0.9.0"
 mimalloc = { version = "0.1", default-features = false }
 prometheus = "0.14.0"
 rand = "0.10.1"
-reqwest = { version = "0.13.4", features = ["json"] }
+reqwest = { version = "0.13.4", features = ["json", "socks"] }
 rust_decimal = "1.42.0"
 schemars = { version = "1.2.1", features = ["jiff02"] }
 serde = { version = "1.0.228", features = ["derive"] }